HTTP NIDS Evasion

This plugin configures Nessus for NIDS evasion see the 'Prefs' panel. NIDS evasion options are useful if you want to determine the quality of the expensive NIDS you just bought. HTTP evasion techniques : - HEAD: use HEAD method instead of GET - URL encoding: - Hex: change characters to %XX - MS...

Legato Networker vulnerability

There's a weakness in the authentification scheme of Legato Networker Software prior to version 6.1. When a client contacts the server, it announces in clear text via RPC his hostname or ip adress , his username and the user's groups. Then the server tries to resolve the ip adress of the machine...

Squid Web Proxy 2.3 - Reverse Proxy

Squid Web Proxy 2.3 - Reverse Proxy source: https://www.securityfocus.com/bid/3062/info Squid is a free client-side web proxy that retrieves cached web pages for quick browsers and a reduction in bandwidth consumption. Squid servers, when configured as an "HTTP accelerator only", may allow remote...

MS Windows 2000 sp1/sp2 isapi .printer Extension Overflow Exploit (2)

Exploit for unknown platform in category remote exploits ===================================================================== MS Windows 2000 sp1/sp2 isapi .printer Extension Overflow Exploit 2 ===================================================================== / IIS 5 remote .printer overflow...

Microsoft Windows Server 2000 SP1SP2 - isapi .printer Extension Overflow (2)

Microsoft Windows Server 2000 SP1SP2 - isapi .printer Extension Overflow 2 / IIS 5 remote .printer overflow. "jill.c" don't ask. by: dark spyrit respect to eeye for finding this one - nice work. shouts to halvar, neofight and the beavuh bitchez. this exploit overwrites an exception frame to contr...

Microsoft Windows Server 2000 SP1/SP2 - isapi .printer Extension Overflow (2)

/ IIS 5 remote .printer overflow. "jill.c" don't ask. by: dark spyrit respect to eeye for finding this one - nice work. shouts to halvar, neofight and the beavuh bitchez. this exploit overwrites an exception frame to control eip and get to our code.. the code then locates the pointer to our large...

CVE-1999-0223

CVE-1999-0223 describes a crash in Solaris syslogd when it processes a message from a host that lacks an inverse DNS entry. The issue is tied to the syslogd service on Solaris; the root cause is the handling of such messages, leading to a crash. Public references (NVD entry) indicate an impact on...

CVE-2001-0207

Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a reverse DNS lookup using the gethostbyaddr function...

CVE-2001-0029

Buffer overflow in oops WWW proxy server 1.4.6 and possibly other versions allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup...

Дырка в HomeSeer

ОБратный путь в директории в встроенном HTTP-сервере...

CVE-2000-0536

xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a reverse DNS entry...

CVE-2000-0536

CVE-2000-0536 affects xinetd 2.1.8.x where access control relies on hostnames; if a connecting host has no reverse DNS entry, connections are not properly restricted. This can allow unauthorized access or bypass controls intended by hostname-based filtering. The vulnerability is described in the ...

CVE-2000-0543

The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not have a reverse DNS entry and they connect to port 4000...

CVE-2000-0536

xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a reverse DNS entry...

Дырка в Jana

В http-сервере разрешен обратный путь в директориях, таким образом можно получить доступ к любому локальному файлу...

Microsoft Windows 95/98 - NetBIOS NULL Name

// source: https://www.securityfocus.com/bid/1163/info Unpredictable results, including system crashes, lock-ups, reboots, and loss of network connectivity, can occur in Windows 95/98 if a NetBIOS session packet is received with the source host name set to NULL. / www.el8.org www.wiretrip.net / /...

DEBIAN-CVE-2000-1221

The line printer daemon lpd in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by...

[SECURITY] New versions of cron fixes possible root exploit

Debian Security Advisory [email protected] http://www.debian.org/security/ Martin Schulze August 30, 1999 Red Hat has recently released a Security Advisory RHSA-1999:030-01 covering a reverse denial of service bug in the vixie cron package. As user you could restart sendmail even if the host...

PT-2013-6314 · Linux +5 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 3.14.3 SUSE Linux Enterprise kernel-pae-devel affected versions not specified SUSE Linux Enterprise kernel-xen-devel affected versions not specified SUSE Linux Enterprise gfs2-kmp-xen affected versions not...